This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft File: fOaNr18IlFbA4dAiRTk1Maxbj8s.mft (raw, json) Hash identifier: 5JYuilc8Cc7O92Mo9IGesTKJVy74ILQ0FFkfzTRGC4s= Subject key identifier: 92:72:9A:9A:77:CC:E6:CB:11:82:11:48:3C:4A:B5:36:8D:AE:1D:6A Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019B3A589151C3612E22AF0F9F702C363A88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft Manifest number: 17DB Signing time: Sat 20 Dec 2025 06:00:41 +0000 Manifest this update: Sat 20 Dec 2025 06:00:41 +0000 Manifest next update: Sun 21 Dec 2025 06:00:41 +0000 Files and hashes: 1: Gy2CW0Td6J-rxJGzgVfuTvJN2Gc.roa (hash: /b5aRnHH3wnxArlR5kFKg9d+odQfqWviv5wIlL2Kwi4=) 2: LuPOINyFzX9xpTNNLpVMhkc3RGs.roa (hash: CVfqSYlx9earVowtUFnY2vr9Ypav6ng0WSshJUDgEG0=) 3: W0y-zOIi1-67OubMNwYseTI2YtY.roa (hash: o3q76eBrYuH9u8MB8bIslqFqm+BZyQwFbiFNU/6C+2A=) 4: fOaNr18IlFbA4dAiRTk1Maxbj8s.crl (hash: oGZ3Xic76rQD6S0AcRuVfBiFWG9J3VtABWe/QIF0P1g=) 5: k0BbLfW1pH9JeekCNksDJuhLIU8.roa (hash: I7bsd1t0LSwpkWSpjQNC0fheclbb8PLVx1rVQYbgTzo=) 6: liY8eILapTD5y2M0s8j0o5Q8kWY.roa (hash: S0HfWHfjX1Uqh+uYLK7ohENnIrYxlreuTzEjaVUpEss=) 7: nh1DAdGlkCnqMoRCOw5nSf1eUrE.roa (hash: 6CL3sDa/YSgMH6T3lPf7wvZWcq37OdDdy32xWrUSt1w=) 8: oHEBA-lXef_j9s4SCfpwpVno2AY.roa (hash: zRL1PawgLvTgljcNtHgtXDKVwMniivvDxGH5MXBaSOA=) 9: zavgzNemz0PuzWJnrL1r_g_mOeM.roa (hash: GhTFQ6FabhR00Vo0TF/PdK9RjLjp+971izL/zbfm494=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:91:51:c3:61:2e:22:af:0f:9f:70:2c:36:3a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Dec 20 06:00:41 2025 GMT Not After : Dec 21 06:00:41 2025 GMT Subject: CN=92729a9a77cce6cb118211483c4ab5368dae1d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:73:a4:a0:3f:da:91:c2:b6:cd:19:e8:f6:50: 73:e3:d4:38:fa:30:44:38:0f:eb:0b:99:6a:8b:b6: d2:15:fb:ac:0f:88:2b:4e:c2:96:7b:ab:10:f6:c8: 8f:8d:7d:69:2e:d8:2b:93:f0:79:88:12:5d:7d:78: cc:b0:67:b4:64:a3:1a:54:3c:89:62:bd:9c:a4:9d: b4:71:20:c4:ac:a5:f1:7c:99:2c:2c:8c:23:d8:7f: 64:c7:df:3e:dc:11:88:a2:04:db:de:e8:12:fc:0a: d7:ec:02:57:c7:81:c2:8e:a0:8f:31:cc:a0:cc:a8: f1:e7:65:7f:18:92:79:6a:b7:63:3a:ed:2c:90:be: be:c7:17:e1:14:04:b0:3f:e6:e3:35:45:32:ec:83: 67:9d:10:c8:75:82:10:33:96:8a:16:57:68:02:81: c5:dc:b4:3d:75:b8:42:b0:97:a8:de:8a:d8:62:15: ce:ef:6b:98:fa:91:69:37:61:23:df:c1:88:f1:3c: 71:2b:2e:c3:3a:ef:7b:8c:96:55:6c:eb:12:e4:26: 9f:66:6a:c8:e4:a4:2e:61:2d:39:2f:db:98:71:55: 15:4b:e4:8b:ed:20:2a:a2:0a:f1:c5:26:09:e3:82: 33:a5:21:16:23:ff:1c:20:ce:6e:c1:cd:d8:ef:ed: 40:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:72:9A:9A:77:CC:E6:CB:11:82:11:48:3C:4A:B5:36:8D:AE:1D:6A X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:60:18:42:79:f7:05:93:c6:6e:96:1e:99:2c:86:60:30:ca: 6c:db:7f:ce:3e:7a:07:a3:9b:ec:bb:63:ad:9f:11:1f:c8:ba: 6b:26:c5:fb:19:52:57:b6:1a:7d:be:57:a5:2d:15:fc:e1:1e: 6e:77:92:01:9a:d5:45:f1:b0:e8:6a:6d:35:8b:f3:c9:29:90: 27:9d:b4:c0:bc:72:52:46:81:ae:47:b4:ca:ec:f0:55:1c:e2: 63:f6:f2:a3:3c:5e:f6:59:b5:39:0f:dc:44:61:a5:9a:71:22: a5:32:86:43:51:a5:69:e8:d7:1e:9c:11:25:60:63:16:2c:51: 4d:8f:8d:f1:98:84:d3:2c:5b:c3:6e:23:27:f1:e9:ca:b7:b6: 20:2b:2d:48:ff:2b:1a:e1:53:6f:c7:84:c8:19:67:3d:56:72: e5:76:1c:6a:5c:2c:20:e0:6d:a1:61:46:ec:5f:0c:4a:ed:0d: be:8f:b5:7d:b3:36:e0:1a:e5:0f:13:ec:23:e3:e7:3c:9c:ae: 0b:e2:29:e3:3a:bf:92:da:89:32:22:79:f8:90:b5:f0:01:5e: e5:3c:f4:0c:46:e7:6e:e8:c2:65:81:6a:b1:58:bd:77:2b:7b: 7c:e1:5a:2f:1e:41:b1:1e:c8:01:ef:a2:44:f2:d1:e8:cc:72: 56:18:bf:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJFRw2EuIq8Pn3AsNjqIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjUxMjIwMDYwMDQxWhcNMjUxMjIxMDYwMDQxWjAzMTEwLwYDVQQD Eyg5MjcyOWE5YTc3Y2NlNmNiMTE4MjExNDgzYzRhYjUzNjhkYWUxZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XOkoD/akcK2zRno9lBz49Q4+jBE OA/rC5lqi7bSFfusD4grTsKWe6sQ9siPjX1pLtgrk/B5iBJdfXjMsGe0ZKMaVDyJ Yr2cpJ20cSDErKXxfJksLIwj2H9kx98+3BGIogTb3ugS/ArX7AJXx4HCjqCPMcyg zKjx52V/GJJ5ardjOu0skL6+xxfhFASwP+bjNUUy7INnnRDIdYIQM5aKFldoAoHF 3LQ9dbhCsJeo3orYYhXO72uY+pFpN2Ej38GI8TxxKy7DOu97jJZVbOsS5CafZmrI 5KQuYS05L9uYcVUVS+SL7SAqogrxxSYJ44IzpSEWI/8cIM5uwc3Y7+1A+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJympp3zObLEYIRSDxKtTaNrh1qMB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0WAYQnn3 BZPGbpYemSyGYDDKbNt/zj56B6Ob7LtjrZ8RH8i6aybF+xlSV7Yafb5XpS0V/OEe bneSAZrVRfGw6GptNYvzySmQJ520wLxyUkaBrke0yuzwVRziY/byozxe9lm1OQ/c RGGlmnEipTKGQ1GlaejXHpwRJWBjFixRTY+N8ZiE0yxbw24jJ/Hpyre2ICstSP8r GuFTb8eEyBlnPVZy5XYcalwsIOBtoWFG7F8MSu0Nvo+1fbM24BrlDxPsI+PnPJyu C+Ip4zq/ktqJMiJ5+JC18AFe5Tz0DEbnbujCZYFqsVi9dyt7fOFaLx5BsR7IAe+i RPLR6MxyVhi/Ng== -----END CERTIFICATE-----Generated at Sat Dec 20 12:10:28 2025 by rpki-client